Comments on: Where in the world is AMO? (Part III: It’s Dead.) http://blog.mozilla.com/mrz/2007/05/09/where-in-the-world-is-amo-part-iii-its-dead./ noise from a mozilla network engineer Thu, 08 May 2008 18:35:20 +0000 http://wordpress.org/?v=wordpress-mu-1.2.5 By: mrz’s noise » Blog Archive » Where in the world is AMO? (Part IV: Take 2) http://blog.mozilla.com/mrz/2007/05/09/where-in-the-world-is-amo-part-iii-its-dead./#comment-187 mrz’s noise » Blog Archive » Where in the world is AMO? (Part IV: Take 2) Mon, 11 Jun 2007 21:56:15 +0000 http://blog.mozilla.com/mrz/2007/05/09/where-in-the-world-is-amo-part-iii-its-dead./#comment-187 [...] a month after the first attempt to get AMO (addons.mozilla.org) served out of Amterdam as well as San Jose failed, we’re [...] […] a month after the first attempt to get AMO (addons.mozilla.org) served out of Amterdam as well as San Jose failed, we’re […]

]]> By: mrz’s noise » Blog Archive » How to build a better (SSL proxy) mouse trap (with lighttpd)? http://blog.mozilla.com/mrz/2007/05/09/where-in-the-world-is-amo-part-iii-its-dead./#comment-127 mrz’s noise » Blog Archive » How to build a better (SSL proxy) mouse trap (with lighttpd)? Fri, 25 May 2007 10:28:47 +0000 http://blog.mozilla.com/mrz/2007/05/09/where-in-the-world-is-amo-part-iii-its-dead./#comment-127 [...] We run our web farm behind a pair of Citrix Netscalers in both San Jose and Amsterdam. What really hits these boxes hard is the SSL offloaded traffic and in certain instances has caused the Netscalers to fall over on themselves. [...] […] We run our web farm behind a pair of Citrix Netscalers in both San Jose and Amsterdam. What really hits these boxes hard is the SSL offloaded traffic and in certain instances has caused the Netscalers to fall over on themselves. […]

]]> By: morgamic http://blog.mozilla.com/mrz/2007/05/09/where-in-the-world-is-amo-part-iii-its-dead./#comment-103 morgamic Sat, 12 May 2007 04:36:32 +0000 http://blog.mozilla.com/mrz/2007/05/09/where-in-the-world-is-amo-part-iii-its-dead./#comment-103 Good post, mrz -- I hope the 9000s work in a couple weeks. :) Good post, mrz — I hope the 9000s work in a couple weeks. :)

]]> By: mrz http://blog.mozilla.com/mrz/2007/05/09/where-in-the-world-is-amo-part-iii-its-dead./#comment-95 mrz Thu, 10 May 2007 05:28:53 +0000 http://blog.mozilla.com/mrz/2007/05/09/where-in-the-world-is-amo-part-iii-its-dead./#comment-95 Two things to keep in mind - 1. AMO isn't the typical https website, especially the VersionCheck traffic (used for extention version updates). Those are short lived sessions but there are lots of them. Without knowing how Citrix actually did their test, it's hard to say if this is relevant or not. Though I'll concede that I should get more than 25% of what they advertise :) 2. There really isn't any alternative solution that includes caching, SSL offloading, compression and load balancing. There are products that do a subset of that are are more expensive than Citrix. There is <a href="http://www.zeus.com/products/zxtm/" rel="nofollow">ZXTM from Zeus</a> that I've looked at briefly. The scale differently and it's not clear to me what the total cost would be to get a system that would match the performance of the Netscaler 12000s (ZXTM is a pure software solution using off the self hardware and my Linux distro of choice so the bulk of the expense will be in getting some number of PC servers + the software). Two things to keep in mind -

1. AMO isn’t the typical https website, especially the VersionCheck traffic (used for extention version updates). Those are short lived sessions but there are lots of them. Without knowing how Citrix actually did their test, it’s hard to say if this is relevant or not. Though I’ll concede that I should get more than 25% of what they advertise :)

2. There really isn’t any alternative solution that includes caching, SSL offloading, compression and load balancing. There are products that do a subset of that are are more expensive than Citrix.

There is ZXTM from Zeus that I’ve looked at briefly. The scale differently and it’s not clear to me what the total cost would be to get a system that would match the performance of the Netscaler 12000s (ZXTM is a pure software solution using off the self hardware and my Linux distro of choice so the bulk of the expense will be in getting some number of PC servers + the software).

]]> By: Jon Pritchard http://blog.mozilla.com/mrz/2007/05/09/where-in-the-world-is-amo-part-iii-its-dead./#comment-94 Jon Pritchard Thu, 10 May 2007 01:15:25 +0000 http://blog.mozilla.com/mrz/2007/05/09/where-in-the-world-is-amo-part-iii-its-dead./#comment-94 Sounds to me like you need to switch hardware vendors. Those figures are so vastly under the estimated, that is it worth continuing buying hardware from Citrix? Sounds to me like you need to switch hardware vendors. Those figures are so vastly under the estimated, that is it worth continuing buying hardware from Citrix?

]]> By: mrz http://blog.mozilla.com/mrz/2007/05/09/where-in-the-world-is-amo-part-iii-its-dead./#comment-93 mrz Wed, 09 May 2007 22:15:41 +0000 http://blog.mozilla.com/mrz/2007/05/09/where-in-the-world-is-amo-part-iii-its-dead./#comment-93 SSL helps with site verification to make sure that the addons.mozilla.org you goto it really the real addons.mozilla.org (and not some browser or DNS hijack). It also verifies that XPIs are coming from a trusted source and there aren't any man-in-the-middle attacks during an install. SSL helps with site verification to make sure that the addons.mozilla.org you goto it really the real addons.mozilla.org (and not some browser or DNS hijack).

It also verifies that XPIs are coming from a trusted source and there aren’t any man-in-the-middle attacks during an install.

]]> By: sam http://blog.mozilla.com/mrz/2007/05/09/where-in-the-world-is-amo-part-iii-its-dead./#comment-92 sam Wed, 09 May 2007 22:04:28 +0000 http://blog.mozilla.com/mrz/2007/05/09/where-in-the-world-is-amo-part-iii-its-dead./#comment-92 Please excuse my ignorance, but why is SSL even necessary? Firefox comes pre-loaded with only mozilla sites as able to install XPIs, so security without it isn't all that bad. Please excuse my ignorance, but why is SSL even necessary? Firefox comes pre-loaded with only mozilla sites as able to install XPIs, so security without it isn’t all that bad.

]]>